4fecc9e93adda068a35ae69b127d5ea2

Sharing

Copy URL

Twitter E-mail

General

Target

4fecc9e93adda068a35ae69b127d5ea2
Size

211KB
MD5

4fecc9e93adda068a35ae69b127d5ea2
SHA1

cfeb8f8a31566d8eb4fe7aa6087cf66ba4f663c8
SHA256

a9f1c80bae5107f0cae797b03a7dc52df7b7bb852f0ab3ffd9281c8b7b23e2a4
SHA512

e9af103c777c5eddf9c9576d3ca64a5f012941e59c820dac68e449945c48e1450e7faa5d040f9fddffe03d13e3fa8241694d1f48dc6c4280a585d398b9b4bd34
SSDEEP

6144:HoL9izSBzlQeNSNXTxv17Mcb+DlAOgwaj8B8L8HVNblJlPHsaz5i7nSngy9vImwQ:kzgNF97McSDlsgg81VlJlPZi7nSngy99

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4fecc9e93adda068a35ae69b127d5ea2

Files

4fecc9e93adda068a35ae69b127d5ea2
.exe windows:5 windows x86 arch:x86

0a8dafb02801845e165886805ba6b157

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
strstr
wcspbrk
tolower
strchr
iswalpha
iswspace
wcstombs
vsprintf
wcsrchr
strspn
__set_app_type
gets
__p__fmode
__p__commode
remove
getenv
fputs
realloc
_amsg_exit
vswprintf
fprintf
mbstowcs
strrchr
strncpy
wcsncmp
_initterm
malloc
swprintf
wcslen
fgetc
time
qsort
srand
isdigit
_ismbblead
wcscoll
isupper
wcstol
wcstod
localtime
fwrite
strerror
_XcptFilter
_exit
strcoll
memset
strpbrk
strtol
strcspn
mktime
printf
wcsncpy
wcscpy
exit
_cexit
__setusermatherr
floor
iswctype
__getmainargs

user32

DialogBoxIndirectParamW
GetDlgItemTextW
RegisterWindowMessageW
GetMessageExtraInfo
SendMessageTimeoutA
SetClassLongW
SetWindowTextW
SendMessageA
LockWindowUpdate
TileWindows
GetAsyncKeyState
CharPrevA
SetCursor
OpenInputDesktop
GetMessagePos
MessageBoxW
AllowSetForegroundWindow
GetWindowDC
GetParent
GetSystemMenu
GetUpdateRect
RegisterWindowMessageA
CharUpperBuffA
InSendMessageEx
CharUpperBuffW
EnableWindow
RegisterClassExW
DestroyWindow
ShowOwnedPopups
GetClassInfoW
HiliteMenuItem
DrawAnimatedRects
GetWindowTextLengthW
SetWindowLongW
UnionRect
ValidateRect
DialogBoxParamA
LoadStringW
ClipCursor
IsWindowEnabled
GetPropW
CharNextW
SwapMouseButton
DialogBoxIndirectParamA
WindowFromPoint
GetNextDlgGroupItem
ShowWindow
CharLowerBuffW
EnumWindows
DestroyMenu
GetKeyboardLayout
InvalidateRect
GetSubMenu
FindWindowExA
RemovePropW
GetMenuState
TranslateAcceleratorW
UnloadKeyboardLayout
SetWindowLongA
SetMenu
CheckMenuItem
BeginDeferWindowPos
DefWindowProcW
ShowWindowAsync
CreateIconIndirect
ChangeMenuW
SetCursorPos
MessageBoxExA
AdjustWindowRectEx
GetCaretPos
GetClientRect
SetDlgItemTextW
LoadCursorW
LoadImageW
DefFrameProcW
InsertMenuW
FindWindowExW
CreateWindowExA
MessageBoxExW
ScrollWindow
MapVirtualKeyA
DrawMenuBar
MapDialogRect
SendNotifyMessageW
UpdateWindow
OffsetRect
LoadAcceleratorsW
AttachThreadInput
IsCharAlphaNumericW
GetKeyNameTextW
CharLowerA
SetMenuDefaultItem
ScrollWindowEx
SetParent
BringWindowToTop
IsCharLowerA
GetMessageTime
GetForegroundWindow
SetDlgItemInt
CharNextA
GetMessageA
ReleaseDC
GetScrollInfo
LoadCursorA
DefWindowProcA
GetClassInfoExW
SetPropW
FindWindowA
InvertRect
GetDlgItemInt
LookupIconIdFromDirectory
CharToOemW
FindWindowW
SetWindowRgn
CopyAcceleratorTableW
InvalidateRgn
DrawIcon
SetLastErrorEx
GetDCEx
CharPrevW
ShowCursor
SendDlgItemMessageA
IsMenu
CreateWindowExW
CopyImage
SetWindowTextA
GetWindowTextA
GetUserObjectInformationW
LoadMenuW
RegisterClassW
GetClassNameW
BeginPaint
ChildWindowFromPointEx
CascadeWindows
GetClassLongA
CreateMenu
GetDialogBaseUnits
wsprintfA
GetMenuItemID
LoadIconA
ClientToScreen
SendDlgItemMessageW
OemToCharA
EnumChildWindows
CreatePopupMenu
GetDlgCtrlID
DialogBoxParamW
IsZoomed
GetScrollPos
MapVirtualKeyExW
IsWindowUnicode
EnumThreadWindows
InsertMenuItemW
ReplyMessage
VkKeyScanW
PostThreadMessageW
TabbedTextOutW
DrawFocusRect
EqualRect
CallWindowProcA

gdi32

CreateSolidBrush
CreateHalftonePalette
GetBkMode
CreateFontA
TextOutA
BitBlt
IntersectClipRect
CreateRoundRectRgn
GetPixel
ResizePalette
ScaleWindowExtEx
CreateDIBSection
GetDIBColorTable
CreateCompatibleBitmap
GetViewportOrgEx
SetPaletteEntries
Ellipse
FillRgn
OffsetRgn
SetBitmapDimensionEx
GetObjectA
CreateRectRgnIndirect
GetTextMetricsA
EnumFontFamiliesExW
CreateBitmap
GetTextAlign
TextOutW
LineDDA
GetSystemPaletteEntries
GetFontData
StretchBlt
CreatePatternBrush
GetNearestColor
GetDIBits
DPtoLP
PtVisible
GetObjectW
GetTextExtentPointW
DeleteObject
GetMapMode
CreateEllipticRgnIndirect
GetTextMetricsW
ScaleViewportExtEx
GetClipBox
SetROP2
CreatePen
SetBitmapBits
SetRectRgn
GetRgnBox
EnumFontsW
SetPixel
CreateFontIndirectA
EndDoc
SelectClipRgn
SetTextColor
GetTextFaceW
SelectPalette
LPtoDP
Polyline
SelectObject
RealizePalette
ExtFloodFill
SetViewportOrgEx
StretchDIBits
Polygon

comctl32

CreateStatusWindowW
ImageList_Destroy
ImageList_LoadImageW
ImageList_SetIconSize
ImageList_Draw
ImageList_Read
ImageList_AddMasked
ImageList_GetImageCount
DestroyPropertySheetPage

comdlg32

ChooseFontW
GetSaveFileNameA
PrintDlgW
CommDlgExtendedError
PageSetupDlgW
ChooseColorW
GetFileTitleW

kernel32

lstrlenA
DeleteFileW
FreeLibrary
GetShortPathNameW
WaitForMultipleObjectsEx
RegisterWaitForSingleObject
LoadLibraryExA
SetCommState
GlobalSize
GetUserDefaultLangID
lstrcatW
WaitForMultipleObjects
SuspendThread
ClearCommError
GlobalAddAtomW
HeapLock
GetThreadPriority
GetPriorityClass
GetAtomNameW
FindResourceExW
GetDateFormatW
IsBadReadPtr
IsValidLanguageGroup
SearchPathA
SetFileApisToOEM
GetLocaleInfoW
GetFileTime
GetModuleFileNameA
GetFullPathNameW
GetTimeFormatW
GetAtomNameA
TerminateThread
OpenFileMappingW
SetThreadAffinityMask
TryEnterCriticalSection
ExitThread
GetFileAttributesExA
GetVersionExA
GetModuleHandleA
ConnectNamedPipe
GetCommProperties
EnumResourceNamesW
lstrcpynA
CompareStringA
GetDateFormatA
SetHandleCount
SetFileTime
GetComputerNameA
GetOverlappedResult
DefineDosDeviceW
GlobalFlags
MulDiv
GlobalFree
GetCommState
GlobalLock
RemoveDirectoryA
LocalAlloc
SetCommBreak
GetFileSize
CreateSemaphoreW
FreeResource
RemoveDirectoryW
CloseHandle
lstrcpyW
SleepEx
CancelWaitableTimer
GlobalMemoryStatusEx
LocalUnlock
FormatMessageW
AreFileApisANSI
lstrcmpiA
VerifyVersionInfoW
MoveFileA
CancelIo
SetNamedPipeHandleState

Exports

Exports

?IsValidFilePathEx@@IJPAGNHJF@X

Sections

.text
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0a8dafb02801845e165886805ba6b157

Headers

File Characteristics

Imports

msvcrt

user32

gdi32

comctl32

comdlg32

kernel32

Exports

Exports

Sections

.text Size: 190KB - Virtual size: 190KB

.data Size: 20KB - Virtual size: 19KB

.text
Size: 190KB - Virtual size: 190KB

.data
Size: 20KB - Virtual size: 19KB